Skip to content

Commit

Permalink
minor #3819 Update csrf_in_login_form.rst (micheal)
Browse files Browse the repository at this point in the history
This PR was submitted for the 2.4 branch but it was merged into the 2.3 branch instead (closes #3819).

Discussion
----------

Update csrf_in_login_form.rst

We want to protect against CSRF, not allow it. :)

Commits
-------

8d80e22 Update csrf_in_login_form.rst
  • Loading branch information
weaverryan committed May 8, 2014
2 parents 1adfd9b + 6188298 commit 52518c0
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions cookbook/security/csrf_in_login_form.rst
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
.. index::
single: Security; CSRF in the Login Form
single: Security; CSRF Protection in the Login Form

Using CSRF in the Login Form
============================
Using CSRF Protection in the Login Form
=======================================

When using a login form, you should make sure that you are protected against CSRF
(`Cross-site request forgery`_). The Security component already has built-in support
Expand All @@ -13,11 +13,11 @@ for CSRF. In this article you'll learn how you can use it in your login form.
Login CSRF attacks are a bit less well-known. See `Forging Login Requests`_
if you're curious about more details.

Configuring CSRF
----------------
Configuring CSRF Protection
---------------------------

First, configure the Security component so it can use CSRF protection.
The Security component needs a CSRF provider. You can set this to use the default
The Security component needs a CSRF token provider. You can set this to use the default
provider available in the Form component:

.. configuration-block::
Expand Down

0 comments on commit 52518c0

Please sign in to comment.